Privacy Policy
Last updated: 03.09.2026
Rockhopper Events Ltd (“we”, “us”, “our”) operates canterburychristmasmarket.co.uk (the “Site”). This policy explains what personal data we collect, why, and what rights you have over it.
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data controller: Rockhopper Events Ltd Company number: 11241742 Registered office: 4 Kings Row, Armstrong Road, Maidstone, Kent, ME15 6AQ [confirm — see note] Contact: canterburychristmasmarket@gmail.com
1. What data we collect
We collect personal data when you:
- Book a bookable activity (e.g. Santa’s Grotto, Breakfast with Santa, VR experiences) through our WooCommerce checkout — name, email address, billing address, order details, and payment confirmation (we do not store your card details — see Section 4).
- Create an account to manage bookings — name, email address, order history.
- Sign up to our mailing list — first name, last name, email address.
- Contact us via the contact form — name, email address, and the content of your message.
- Browse the Site — technical data collected automatically via cookies and analytics (IP address, device/browser type, pages visited). See our Cookie Policy for full details.
We do not knowingly collect any special category data (health, religion, etc.) and ask that you don’t include this in free-text fields such as the contact form.
2. How we use your data
| Purpose | Data used | Legal basis |
|---|---|---|
| Processing and fulfilling bookings | Name, email, address, order details | Contract |
| Managing your account | Name, email, order history | Contract |
| Sending event updates and news you’ve opted into | Name, email | Consent |
| Responding to enquiries | Name, email, message | Legitimate interest |
| Understanding site usage and improving the Site | Analytics/cookie data | Consent (analytics cookies) |
| Preventing fraud and keeping the Site secure | Technical/log data | Legitimate interest |
| Meeting our legal and accounting obligations | Order/transaction records | Legal obligation |
We will never sell your personal data.
3. Marketing emails
If you sign up to our mailing list, we’ll send you news and updates about the Christmas Market. By submitting the form you agree to us storing your details for this purpose. You can unsubscribe at any time using the link in any email we send, or by contacting us directly — we’ll stop processing your data for marketing purposes as soon as we receive your request.
We use Mailchimp to manage and send these emails — see Section 4 for how they handle your data.
4. Who we share your data with
We share personal data with a small number of trusted third parties who help us run the Site and process bookings:
- Stripe — processes payment for bookable activities. We do not see or store your full card details. See Stripe’s Privacy Policy.
- Mailchimp — sends our mailing list emails. See Mailchimp’s Privacy Policy.
- Google Analytics — provides anonymised, aggregated site usage statistics.
- Our website host and IT support providers — maintain the Site and its underlying infrastructure, including KC Web Design.
We require all third parties to respect the security of your data and to treat it in accordance with the law. We don’t allow them to use your data for their own purposes.
If you’re based in the UK, your data is generally processed within the UK/EEA. Where a provider transfers data outside the UK, we ensure appropriate safeguards are in place (such as the UK’s International Data Transfer Agreement or adequacy regulations).
5. How long we keep your data
- Order and booking records: 6 years, in line with UK tax and accounting requirements.
- Account data: for as long as your account remains active, or until you ask us to delete it.
- Mailing list data: until you unsubscribe or ask us to remove you.
- Contact form enquiries: up to 12 months, unless a longer period is needed to resolve the matter.
6. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erase your data (“right to be forgotten”), where applicable
- Restrict or object to certain processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email canterburychristmasmarket@gmail.com. We’ll respond within one month.
If you’re unhappy with how we’ve handled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
7. Cookies
The Site uses cookies for essential functions (such as your shopping basket), analytics, and embedded third-party content. Full details, including how to manage your preferences, are in our Cookie Policy.
8. Children’s data
The Christmas Market and its activities are family events, but bookings and accounts must be made by an adult (18+). We do not knowingly collect personal data directly from children.
9. Security
We use appropriate technical and organisational measures — including SSL encryption, secure hosting, and restricted access to personal data — to protect your information. No method of transmission over the internet is 100% secure, but we work to protect your data to industry standards.
10. Changes to this policy
We may update this policy from time to time, for example to reflect changes in our practices or legal requirements. The “last updated” date at the top shows when it was last revised. We’d encourage you to check back periodically.
11. Contact us
Questions about this policy or your data? Get in touch:
Rockhopper Events Ltd 1 Langley Court, Pyle Street, Newport, Isle of Wight, United Kingdom, PO30 1LA
canterburychristmasmarket@gmail.com